$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/f2bba345-e6c3-36d2-a426-f5748ec1f2d2.roa File: f2bba345-e6c3-36d2-a426-f5748ec1f2d2.roa (raw, json) Hash identifier: ai8TfFDarr4UFeL0vQf0eghGuo6wQBsQwSRxOtqg/2U= Subject key identifier: 3E:07:4E:31:4D:69:AC:AB:11:CC:83:05:6B:EF:4F:B2:8F:F6:2F:20 Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087 Certificate serial: 010D0C9F43285849166D2791E0F5E40187BF1300 Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/f2bba345-e6c3-36d2-a426-f5748ec1f2d2.roa Signing time: Wed 05 Mar 2025 13:41:32 +0000 ROA not before: Wed 05 Mar 2025 13:41:32 +0000 ROA not after: Tue 03 Jun 2025 12:41:32 +0000 asID: 53356 IP address blocks: 209.178.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:16:6d:27:91:e0:f5:e4:01:87:bf:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087 Validity Not Before: Mar 5 13:41:32 2025 GMT Not After : Jun 3 12:41:32 2025 GMT Subject: CN=826c7387-12b8-49a6-bba2-4b3ac5932c68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:89:be:f7:93:70:43:38:5d:2e:29:6d:20:74: b7:d5:1c:34:11:a9:56:38:2a:bb:42:bb:48:e4:7a: e9:59:77:5b:e6:47:94:2b:34:78:f5:df:0b:02:0d: f1:58:6c:eb:a4:0c:2b:1b:b1:7d:a6:b8:8e:86:a0: 57:cd:6e:e7:30:70:a7:7c:30:5b:86:24:af:51:17: c6:5b:af:ad:0a:fa:c4:1f:0f:5a:c4:f3:1a:6e:7d: 84:93:af:d5:86:48:2b:ea:15:08:62:c5:89:17:19: b8:72:71:0f:00:a9:6d:48:07:97:61:87:c7:8d:b4: 3a:2e:d9:a1:c2:2c:04:75:65:ec:8a:2a:4c:0e:51: 36:56:e4:ac:d7:06:76:b0:43:fb:84:aa:9d:a3:b9: b0:69:79:aa:66:d8:76:69:0b:9e:62:b6:31:89:ac: f3:51:fa:90:b3:f5:5c:77:d5:c8:ae:e4:7b:3c:6a: 27:43:ad:69:a3:2a:99:10:58:67:14:7e:34:c4:0b: e2:0a:b7:ba:5c:54:dd:39:1e:bb:5c:5f:ec:6e:7c: a4:e7:c1:8b:c6:f6:ca:60:94:3c:42:88:fe:f2:fd: 8b:1f:8a:fe:6b:f9:4c:7f:13:bd:39:c1:0c:f3:ea: a4:51:95:e1:96:5a:ed:14:99:9b:51:ad:68:5d:a4: ce:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:07:4E:31:4D:69:AC:AB:11:CC:83:05:6B:EF:4F:B2:8F:F6:2F:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/f2bba345-e6c3-36d2-a426-f5748ec1f2d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl X509v3 Authority Key Identifier: keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer sbgp-ipAddrBlock: critical IPv4: 209.178.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:67:e7:de:23:9b:99:e8:41:67:c6:12:a9:63:99:31:75:e2: c6:d3:a3:21:de:7e:9a:72:59:a3:a8:14:13:08:65:83:04:5c: b3:35:95:79:19:c8:51:b4:92:47:12:51:c2:0e:fa:3e:c7:b5: df:eb:7a:39:db:a6:76:b7:70:f1:1c:da:af:8f:54:c8:a7:4b: 2e:cb:0e:64:64:03:39:b8:e1:6d:f7:16:13:f8:02:08:2a:20: 74:f4:3a:13:62:15:1c:ea:e6:69:31:75:cc:be:f9:be:f0:37: fb:68:03:49:65:96:77:9f:0f:f9:21:1e:be:79:00:b5:41:20: aa:3a:bb:b2:64:32:4e:69:69:89:28:03:e8:56:31:20:a3:83: 68:ee:64:51:e6:e7:fe:5b:16:a8:44:93:7a:dc:fc:74:ab:90: 4a:9b:86:15:11:c3:70:6c:60:95:db:af:a0:22:fd:0a:73:1c: 95:b9:20:f4:3a:17:15:0d:aa:4c:82:65:33:62:93:ca:9f:62: 62:89:ed:90:63:9c:cf:22:e8:00:d1:98:b8:18:7c:00:cc:8a: 08:9b:60:21:5f:2a:c8:bc:ea:ac:be:96:85:cd:92:cc:17:78: b4:49:1e:1d:b6:30:24:91:7d:4b:a3:49:cf:f4:e7:71:27:5a: 5e:16:9e:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkWbSeR4PXkAYe/EwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5 MDg3MB4XDTI1MDMwNTEzNDEzMloXDTI1MDYwMzEyNDEzMlowLzEtMCsGA1UEAxMk ODI2YzczODctMTJiOC00OWE2LWJiYTItNGIzYWM1OTMyYzY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYm+95NwQzhdLiltIHS31Rw0EalWOCq7QrtI 5HrpWXdb5keUKzR49d8LAg3xWGzrpAwrG7F9priOhqBXzW7nMHCnfDBbhiSvURfG W6+tCvrEHw9axPMabn2Ek6/Vhkgr6hUIYsWJFxm4cnEPAKltSAeXYYfHjbQ6Ltmh wiwEdWXsiipMDlE2VuSs1wZ2sEP7hKqdo7mwaXmqZth2aQueYrYxiazzUfqQs/Vc d9XIruR7PGonQ61poyqZEFhnFH40xAviCre6XFTdOR67XF/sbnyk58GLxvbKYJQ8 Qoj+8v2LH4r+a/lMfxO9OcEM8+qkUZXhllrtFJmbUa1oXaTOywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4HTjFNaayrEcyDBWvvT7KP9i8gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2 MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvZjJiYmEzNDUtZTZjMy0z NmQyLWE0MjYtZjU3NDhlYzFmMmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5 NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2 OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk ODk0NjkwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0bLrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1n594jm5noQWfGEqljmTF14sbToyHefppyWaOoFBMIZYMEXLM1lXkZ yFG0kkcSUcIO+j7Htd/rejnbpna3cPEc2q+PVMinSy7LDmRkAzm44W33FhP4Aggq IHT0OhNiFRzq5mkxdcy++b7wN/toA0lllnefD/khHr55ALVBIKo6u7JkMk5paYko A+hWMSCjg2juZFHm5/5bFqhEk3rc/HSrkEqbhhURw3BsYJXbr6Ai/QpzHJW5IPQ6 FxUNqkyCZTNik8qfYmKJ7ZBjnM8i6ADRmLgYfADMigibYCFfKsi86qy+loXNkswX eLRJHh22MCSRfUujSc/053EnWl4WnjU= -----END CERTIFICATE-----Generated at Sat Apr 5 04:34:15 2025 by rpki-client